Extracted

• • Target

    baf217d7bb8f3a86856def6891638318a94ed5d7082149d4dd4cb755d90d86ce.exe

  • Size

    275KB

  • MD5

    0a7b3454fdad8431bd3523648c915665

  • SHA1

    800a97a7c1a92a92cac76afc1fe5349895ee5287

  • SHA256

    baf217d7bb8f3a86856def6891638318a94ed5d7082149d4dd4cb755d90d86ce

  • SHA512

    020e45eaeee083d6739155d9a821ab54dd07f1320b8efb73871ee5d29188122fdbb7d39b34a8b3694a8b0c08ae1801ec370e40ff8d837c9190a72905f26baff9

  • SSDEEP

    6144:vh0ZpFC4sffny7TuLBdZlT4DIJYdy3g8ioyrN:vh0ZpFCfB3TGyYy3biBZ

  Score

  10^/10

  stealcvidar41d35cbb974bc2d1287dcd4381b4a2a8discoverystealer

  • Detect Vidar Stealer

    stealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2